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FAST PROTECTION IN RING TOPOLOGIES 

FIELD OF THE INVENTION 

The present invention relates generally to 
communication networks, and specifically to high-speed 
packet rings . 

BACKGROUND OF THE INVENTION 

Network ring topologies are gaining in popularity, 
particularly in Internet Protocol (IP) networks. Such 
networks enable carriers to offer large bandwidth to 
users in a cost-effective manner. They also lend 
themselves to fast rerouting in the event of network 
failures, since two alternative routes - in clockwise and 
counterclockwise directions - are generally available for 
connecting any two nodes on the ring. A drawback of 
traditional ring implementations, such as SONET/SDH, is 
that one of the directions is designated as the active 
ring, while the other direction remains on standby for 
fault protection when needed. In other words, at any 
given time, all of the nodes in the ring transmit and 
receive data only in the active direction. Therefore, 
ordinarily half of the available bandwidth in these rings 
is reserved for fault protection and is not exploited 
under normal operating conditions. 

Some recently-developed bidirectional protocols 
provide more efficient bandwidth utilization by enabling 
data to be transferred between any pair of nodes in 
either direction around the ring. The two opposing 
traffic directions are commonly referred to as an inner 
ring and an outer ring. It will be understood, however, 
that in the context of the present patent application and 
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in the claims, the terms "inner" and "outer/' as well as 
"clockwise" and "counterclockwise, " are used arbitrarily 
to distinguish between the two opposing directions of 
packet flow in a ring network. These terms are chosen 
solely for convenience of explanation, and do not 
necessarily bear any relation to the physical 
characteristics of the network. 

The leading bidirectional protocol for high-speed 
packet rings is the Resilient Packet Rings (RPR) 
protocol, which is in the process of being defined as 
IEEE standard 802.17. Network-layer routing over RPR is 
described, for example, by Jogalekar et al . , in "IP over 
Resilient Packet Rings" (Internet Draft 

draft- jogalekar-iporpr-00) , and by Herrera et al., in "A 
Framework for IP over Packet Transport Rings" (Internet 
Draft draf t-ietf -ipoptr-f ramework-00 ) . A proposed 

solution for Media Access Control (MAC - protocol layer 
2) in bidirectional ring networks is the Spatial Reuse 
Protocol (SRP) , which is described by Tsiang et al., in 
Request for Comments (RFC) 2892 of the Internet 
Engineering Task Force (IETF) . These documents are 
incorporated herein by reference. They are available at 
www.ietf.org. Using protocols such as these, each node 
in a ring network can communicate directly with all other 
nodes through either the inner or the outer ring, using 
the appropriate Media Access Control (MAC) addresses of 
the nodes . 

When a node detects a fault in a ring network 
(typically due to failure of a segment or of one of the 
other nodes in the network) , it sends a failure alarm 
around the network to the other nodes. Based on the 
alarm location, each of the nodes must decide how to 
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handle data flows that it is transmitting. Various 
protection mechanisms are known in the art for dealing 
with such failures, such as wrapping traffic from one of 
the rings onto the other in order to avoid the failed 
node or segment, and steering traffic at each node away 
from the failed node or segment. It is generally 
required that the protection mechanism take no more than 
50 ms to start operating following occurrence of the 
fault, in line with the standard performance of SONET/SDH 
rings. Therefore, each of the nodes must be capable of 
deciding rapidly whether or not it is necessary to divert 
its current data flows from their previously-determined 
paths. In order to conserve bandwidth, it may even be 
desirable to stop a given flow entirely if the 
destination node has become unreachable due to the fault. 
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SUMMARY OF THE INVENTION 

It is an object of some aspects of the present 
invention to provide improved methods and devices for 
determining paths over which data flows are to be 
conveyed in a ring network. 

It is a further object of some aspects of the 
present invention to provide an improved mechanism for 
rapid fault protection in a ring network. 

In preferred embodiments of the present invention, 
each of the nodes in a ring network responds to a fault 
by constructing a general mask, which indicates the 
segment or segments of the network that have become 
unreachable as a result of the fault. Preferably, the 
mask has the form of a bitmap, with a bit for each 
segment, in which the bits corresponding to the 
unreachable segments are set. In addition, for each data 
flow that it must transmit, the node constructs a 
specific mask, preferably in bitmap form similar to the 
general mask, indicating the segments over which the flow 
was to be conveyed to the destination node before the 
fault occurred. 

To determine the disposition of the data flow, the 
node mathematically superimposes the general and specific 
masks, preferably by means of a Boolean conjunction 
operation. When the result is null (no overlap between 
general and specific masks), the node can simply transmit 
the flow without change. When the result corresponds 
exactly to the general mask (showing that the unreachable 
segments are all contained within the intended path) , the 
node steers the flow in the opposite direction, away from 
the failed segments. In any other case (only partial 
overlap of the unreachable segments with the desired 
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path) , the node concludes that the destination node has 
been isolated by the fault, and is no longer reachable in 
either ring direction. The data flow is therefore 
delayed or discarded entirely. In any case, the node is 
able to decide rapidly, with minimal computational cost, 
on the course of action that makes optimal use of the 
network resources remaining after the fault. 

There is therefore provided, in accordance with a 
preferred embodiment of the present invention, in a 
bidirectional ring network, in which nodes are mutually 
connected by network segments, a method of fault 
protection, including : 

constructing a general mask indicating which of the 
segments can be reached; 

for a given data flow to be conveyed through the 
network from a source node to a destination node, 
constructing a specific mask indicating the segments on a 
desired path of the flow; and 

superimposing the general and specific masks in 
order to determine a disposition of the flow. 

Preferably, constructing the general mask includes 
assigning a respective general mask bit to each of the 
segments, indicating whether the segment can be reached 
following occurrence of the fault. Most preferably, 
constructing the specific mask includes assigning a 
respective specific mask bit to each of the segments, 
indicating whether the flow was to be conveyed over the 
segment had the fault not occurred. 

Preferably, superimposing the masks includes 
combining the masks by means of a Boolean operation. 

In a preferred embodiment , superimposing the masks 
includes determining whether to convey the data flow over 



5 



42348S1 



the desired path, to steer the data flow over an 
alternative path, or to stop conveying the data flow. 
Preferably, superimposing the masks includes generating a 
combined mask, and determining that the data flow should 
be conveyed over the desired path when the combined mask 
is null, that the data flow should be steered over the 
alternative path when the combined mask corresponds to 
the general mask, and that the data flow should not be 
conveyed when the combined mask is neither null, nor does 
it correspond to the general mask. 

There is also provided, in accordance with a 
preferred embodiment of the present invention, a 
communication device for use in a bidirectional ring 
network, in which nodes are mutually connected by network 
segments, the device including a network processor, which 
is adapted to construct a general mask indicating which 
of the segments can be reached in the event of a fault in 
the network, and to construct a specific mask for a given 
data flow to be conveyed through the network from a 
source node to a destination node, the specific mask 
indicating the segments on a desired path of the flow, 
and to superimpose the general and specific masks in 
order to determine a disposition of the flow. 

The present invention will be more fully understood 
from the following detailed description of the preferred 
embodiments thereof, taken together with the drawings in 
which: 
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BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram that schematically 
illustrates a ring network, in accordance with a 
preferred embodiment of the present invention; 

Fig. 2 is a block diagram that schematically shows a 
detail of a node in the network of Fig. 1; 

Fig. 3 is a block diagram that schematically 
illustrates steering of packets in the network of Fig. 1 
following occurrence of a fault, in accordance with a 
preferred embodiment of the present invention; and 

Fig. 4 is a flow chart that schematically 
illustrates a method of fault protection in a ring 
network, in accordance with a preferred embodiment of the 
present invention . 
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DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 

Fig. 1 is a block diagram that schematically 
illustrates a bidirectional ring network 20, in 
accordance with a preferred embodiment of the present 
invention. Network 20 comprises a plurality of nodes 22, 
labeled A through G, which are mutually connected by 
network segments 31, 32, 33, 34, 35, 36 and 37. The 
nodes typically comprise switching equipment, and may 
serve as either gateways to other networks (aggregation 
points) or access points. The network segments comprise 
a bidirectional communication medium, such as optical 
fibers or conductive wires. The communication medium is 
configured to define an inner ring 24, over which packets 
are conveyed between the nodes in a clockwise direction, 
and an outer ring 2 6, over which the packets are conveyed 
in a counterclockwise direction. 

The sequence of dashed arrows in the figure shows 
the path of an exemplary data flow on ring 2 6 from source 
node F to destination node B via segments 31, 32, 33 and 
34. In one preferred embodiment of the present 

invention, the flow corresponds to a Multiprotocol Label 
Switching (MPLS) tunnel provided between nodes F and B, 
in accordance with IETF RFC 3031, entitled "Multiprotocol 
Label Switching Architecture" (January, 2001) , which is 
incorporated herein by reference. (This RFC is available 
at www.ietf.org/rfc.html.) Alternatively, the flow may 
be created using any other suitable communication 
protocol known in the art. 

Fig. 2 is a block diagram that schematically shows 
details of one of nodes 22, in accordance with a 
preferred embodiment of the present invention. 
Typically, the node comprises a pair of MAC blocks 40 and 
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42, with block 40 serving inner ring 24, and block 42 
serving outer ring 26. MAC blocks 40 and 42 are coupled 
to and controlled by a network processor 44. The network 
processor preferably comprises a chip or chip set that is 
able to access and process higher-layer protocol 
information. It performs network-layer functions, such 
as IP processing and routing of data flows, as well as 
delivery of packets to users (in the case of access 
nodes) or to another network (in the case of gateway 
nodes) . Optionally, the network processor handles other, 
higher-level functions, as well, such as Quality of 
Service (QoS) and network security. In addition (and 
most centrally from the point of view of the present 
invention) , processor 44 is responsible for fault 
protection, as described in detail hereinbelow. 

Fig. 3 is a block diagram showing an alternative 
route taken by the data flow from node F to node B, in 
accordance with a preferred embodiment of the present 
invention, following occurrence of a fault in segment 33. 
Node F has received an alarm indicating that segment 33 
is not reachable and has determined accordingly, using 
the method described below, that the flow to node B that 
previously passed through this segment (as shown in Fig. 
1) must be redirected. Accordingly node F steers the 
data flow to node B over ring 24 through segments 37, 36 
and 35. In the case of MPLS, mentioned above, steering 
is carried out by directing the flow through a different 
tunnel, running in the clockwise direction, rather than 
counterclockwise, as before the fault occurred. 

Fig. 4 is a flow chart that schematically 
illustrates a method of fault protection that is used by 
nodes 22 in network 2 0 in determining how to handle 
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faults when they occur, in accordance with a preferred 
embodiment of the present invention. For the purposes of 
this method, each node builds and maintains two masks - a 
general mask and a specific mask - preferably in an 
ordered bitmap form, with one bit for each of segments 
31-37. At a general mask building step 50, the node 
builds a general mask indicating which of the segments 
cannot be reached as a result of the fault. In the 
situation shown in Fig. 3, the general mask constructed 
by node F would have the form 0000100, wherein the bits 
run in a counterclockwise direction from segment 31 
(least significant bit) to segment 37 (most significant 
bit) . The third bit is set to "1" to indicate that 
segment 33 is broken. Alternative orders and 

representations of the bits may also be used. The 
general mask in the absence of any fault in network 20 
has the form 0000000. 

The node builds a specific mask to represent each of 
its data flows, at a specific mask building step 52. In 
order to save time in implementing protection when a 
fault occurs, the specific mask for each data flow may be 
built at the time the data flow is initiated, rather than 
waiting for a fault to occur. For the flow shown in Fig. 
1, the specific mask at node F has the form 0001111, to 
indicate that the flow passes through segments 31, 32, 33 
and 34. 

In order to determine how to handle the data flow 
following the fault, node F mathematically superimposes 
the applicable general and specific masks, preferably by 
taking the Boolean conjunction (AND) of the masks, at a 
conjunction step 54. If the conjunction is 0000000, the 
node can conclude that there is no overlap between this 



10 



42348S1 



data flow and the failed segments in network 20, and 
therefore determines that no steering of this flow is 
required, at a non-action step 56. (As long as there is 
no fault in the network, the general mask itself is 
0000000, so that the conjunction remains zero, and no 
steering is performed.) 

In the situation shown in Fig. 3, however, the 
conjunction of the masks is 0000100, which is equal to 
the general mask itself. In this case, the node 
concludes that the current data flow overlaps all of the 
unreachable segments, and therefore steers the data flow 
around the ring in the opposite direction, at a steering 
step 58, as shown in the figure. On the other hand, if 
the conjunction is non-zero but is not equal to the 
general mask, the source node of the flow concludes that 
there are unreachable segments on both sides of the 
destination node, making the destination node itself 
unreachable. When this occurs, the source node 

preferably discards the packets in the data flow, at a 
discard step 60, in order to avoid wasting network 
bandwidth. Alternatively, the source node may hold the 
flow, and attempt to resend it later. 

The following are some further examples of network 
faults and their handling with respect to the data flow 
of Fig. 1, using the method described above: 

• If node E fails, then the general mask is 0000011. 
The conjunction of this mask with the specific mask 
0001111 is 000011 (equal to the general mask), and 
the data flow is steered as in the case shown in 
Fig. 3. 
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• If node A fails, the general mask is 0110000. The 
conjunction with the specific mask is 0000000, so 
that no steering is performed. 

• If segments 33 and 35 fail, the general mask is 
0011100 (since segment 34 is also unreachable) . The 
conjunction with the specific mask is 0001100, which 
is different from the general mask. In this case, 
the flow is discarded. 

Although the preferred embodiment described above 
uses a certain type of bitmap representation of the ring 
network, along with the Boolean conjunction operator for 
superimposing the general and specific masks , it will be 
apparent to those skilled in the art that other mask 
representations and mathematical and/or logical 
operations may be used for the same purpose. Moreover, 
although this embodiment is described with reference to 
certain specific network configurations and communication 
protocols, the principles of the present invention may 
also be applied in ring networks of other types, which 
implement different protocols, such as SONET 
Bi-Directional Line-Switched Rings (BLSR) . This protocol 
is described in Bellcore document GR-1230, entitled 
"SONET Bi-Directional Line-Switched Ring Equipment 
Generic Criteria," (December, 1998), which is 
incorporated herein by reference. 

It will therefore be appreciated that the preferred 
embodiments described above are cited by way of example , 
and that the present invention is not limited to what has 
been particularly shown and described hereinabove. 
Rather, the scope of the present invention includes both 
combinations and subcombinations of the various features 
described hereinabove, as well as variations and 
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modifications thereof which would occur to persons 
skilled in the art upon reading the foregoing description 
and which are not disclosed in the prior art. 
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